Software End-of-Life policy vs end of support

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Software End-of-Life policy vs end of support

L0 Member

How long will a software listed as end of life ( https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary ) be supported? I have read conflicting information on this.

 

I suppose support could be defined as:
1) Receive general tech support if a case is opened

2) Receive software updates forissues

 

I ask as 8.0 is showing an EOL at the first of next year and 8.1 still does not seem to be mainstream.

 

6 REPLIES 6

Cyber Elite
Cyber Elite

@firewall-pupil,

From my understanding EOL is when PAN stops sending any updates and you will not recieve any maintenance updates. 

1) You'll receieve support as long as you have a valid support contract. That being said, the first thing TAC is likely to recommend if you call in with an issue is that you upgrade to a newer release. Configuration cases would maintain the same. 

2) While I imagine that PAN could make an exception if a security bug was found and enough people where known to be running the EOL version, I wouldn't count on this. EOL means that Palo is done supporting that version. 

 

As for support; the base major version releases will all recieve a smaller life cycle then *.1 releases. I fully expect that PAN will have 8.1.* released in a perfectly capable release by the end of this year, and wouldn't worry about not being able to upgrade to 8.1 by Jan 29th 2019. 

L7 Applicator

The terms are defined on the EOL policy page (though there are no links to it from the EOL page you supplied):

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-policy

 

 

The key terms are defined at the bottom, but for what you're specifically referring to it means:

"Support includes technical support, bug fixes, maintenance releases, workarounds, and patches for critical bugs"

 

So essentially, when something is end-of-life (or end-of-support), it means you should not expect to even be able to open a case or get configuration help. By extension, it also means no bug fixes (including security fixes). In fact, you'll notice on the Security Advisories page there are no recent updates for any 7.0 release as that version is EOL. 

Hi

 

As @BPry already wrote, I am also sure that there will be a release that is usable/recommended untill EOL of 8.0 is here. But I also unterstand @firewall-pupil's point and it's kind of true - looking at statistics it's getting close...

So here are some informations about releases since 6.0:

 

VersionReleasedateDays since previous Version
6.0.1517.10.2016109
6.0.1430.06.2016129
6.0.1322.02.201690
6.0.1224.11.201590
6.0.1126.08.2015121
6.0.1027.04.201550
6.0.908.03.201546
6.0.821.01.201544
6.0.708.12.201446
6.0.623.10.201430
6.0.523.09.201450
6.0.404.08.201454
6.0.311.06.201449
6.0.223.04.201445
6.0.109.03.201449
6.0.019.01.2014 
  Average: 66.8
  Days untill x.x.7: 323

 

VersionReleasedateDays since previous Version
6.1.2128.06.2018113
6.1.2007.03.201896
6.1.1901.12.2017135
6.1.1819.07.201783
6.1.1727.04.201790
6.1.1627.01.201791
6.1.1528.10.201659
6.1.1430.08.201642
6.1.1319.07.201640
6.1.1209.06.201657
6.1.1113.04.201650
6.1.1023.02.201642
6.1.912.01.201653
6.1.820.11.201560
6.1.721.09.201555
6.1.628.07.201528
6.1.530.06.201550
6.1.411.05.201554
6.1.318.03.201548
6.1.229.01.201543
6.1.117.12.201453
6.1.025.10.2014 
  Average: ~63.9
  Days untill x.x.7: 331

 

VersionReleasedateDays since previous Version
7.0.1904.12.201787
7.0.1808.09.201756
7.0.1714.07.201738
7.0.1606.06.201748
7.0.1519.04.201753
7.0.1425.02.201743
7.0.1313.01.201736
7.0.1208.12.201643
7.0.1126.10.201647
7.0.1009.09.201639
7.0.901.08.201642
7.0.820.06.201638
7.0.713.05.201652
7.0.622.03.201642
7.0.509.02.201650
7.0.421.12.201569
7.0.313.10.201548
7.0.226.08.201538
7.0.119.07.2015 
  Average: ~48.3
  Days untill x.x.7: 299

 

VersionReleasedateDays since previous Version
7.1.1928.07.201850
7.1.1808.06.201846
7.1.1723.04.201846
7.1.1608.03.201850
7.1.1517.01.201857
7.1.1421.11.201740
7.1.1312.10.201743
7.1.1230.08.201755
7.1.1106.07.201745
7.1.1022.05.201745
7.1.907.04.201749
7.1.817.02.201749
7.1.730.12.201643
7.1.617.11.201646
7.1.502.10.201652
7.1.411.08.201643
7.1.329.06.201648
7.1.212.05.201624
7.1.118.04.201620
7.1.029.03.2016 
  Average: ~44.8
  Days untill x.x.7: 276

 

VersionReleasedateDays since previous Version
8.0.1209.08.201835
8.0.11-h105.07.201852
8.0.1014.05.201841
8.0.903.04.201851
8.0.811.02.201845
8.0.728.12.201745
8.0.613.11.201754
8.0.520.09.201756
8.0.426.07.201738
8.0.318.06.201752
8.0.227.04.201748
8.0.110.03.201740
8.0.029.01.2017 
  Average: ~46.4
  Days untill x.x.7: 333

 

VersionReleasedateDays since previous Version
8.1.313.08.201861
8.1.213.06.201843
8.1.101.05.201861
8.1.001.03.2018 

 

For 8.1 there obviously aren't a lot versions yet. So I can only speculate about the future. In the past normally version x.x.7 was installable almost without any risks. So lets assume this will also be the case with 8.1. The overall time between releases since 6.0 was ~54.6 days, but as a release gets older the time between versions increases which is logical as PaloAlto focuses on the newer major versions. So for a (maybe) better prediction I also summed up the days between a new major release till x.x.7. The average for this since 6.0 is 312.4 days.

This means that we get 8.1.7 on the 7th January 2019. Of course this date is only based on average times between releases from the past, but anyway it will be close to EOL of 8.0. Specially for big environments this could mean some work at the end of the year / beginning of 2019 (at least if you want to avoid having a release in production that is EOL).

 

We'll see 😉

 

@Gertjan-HFG

Thanks for the information. This should be plenty of time to update to 8.1

... at least for all who keep their devices up to date 😛

L0 Member

As per the PA EOL policy, they would support following,

 

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-policy

 

PAN-OS Version Support Policy

  • Major feature releases will be supported for 24 months from the date of release.

    • Minor feature releases (see definition below) will be supported for 42 months from the date of release.

    • Support may include technical support, bug fixes, Maintenance releases, workarounds, and patches for critical bugs.

  • VM-Series Accelerated Feature Releases (XFR) will be supported for 12 months from the date of release.

  • 9436 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!